I took the FAQ on Rights Management and made a first-pass attempt to improve it. It would help if someone could look at it and make sure I have not misunderstood anything.  It needs more work. This is just step one.

http://www.xwiki.org/xwiki/bin/view/AdminGuide/Rights+Management

Also, i would LOVE to rewrite the following section, but in order to do so, i would need to see the actual code that does this routine. Does anyone know where the code behind this part is? ...

Evaluation Order

Here 'user' means 'user or a group containing the user':
1.        Check if the user has the 'admin' right at the XWiki level -> if so continue...
2.        Check if the user has the 'admin' right at the Space level -> if so continue...
3.        Check if the user is denied access to the current document through the 'deny' right for the document -> if so drop out negatively. If not, then if a deny right exists for others users remember it.
4.        Check if the user is allowed access to the current document through the 'allow' right in the document -> if so drop out positively. If not, then if a deny right exists for others users remember it.
5.        Check if the user is denied access to the wiki space through the 'deny' right in the WebPreferences document for that space -> if so drop out negatively. If not, then if a deny right exists for others users remember it.
6.        Check if the user is allowed access to the wiki space through the 'allow' right in the WebPreferences document for that space -> if so drop out positively. If not, then if a deny right exists for others users remember it.
7.        Check if the user is denied access at the XWiki level through the 'deny' right in the XWiki.XWikiPreferences document -> if so drop out negatively. If not, then if a deny right exists for others users remember it.
8.        Check if the user is allowed access at the XWiki level through the 'allow' right in the XWiki.XWikiPreferences document -> if so drop out positively. If not, then if a deny right exists for others users remember it.

==================================
Cody Burleson
IBM, Business Consulting Services
On Demand Workplaces
"Simplifying access to content, applications, people and processes."

Current Client Office (Mon - Thur): (404) 828-4583
Home Office [Friday, Sat. Sun. or email a voice message]: (214) 233.3546
Cell [anytime]: (214) 537-8783
Email: cburleso@us.ibm.com